Filter @resources from the list of allowed syscalls

This commit is contained in:
Florian Preinstorfer 2026-06-22 11:46:17 +02:00 committed by nblock
parent 6e0814a845
commit f6865fb40c

View file

@ -45,6 +45,7 @@ StateDirectoryMode=0750
SystemCallArchitectures=native
SystemCallFilter=@system-service
SystemCallFilter=~@privileged
SystemCallFilter=~@resources
UMask=0077
[Install]